CVE-2023-41588

The CVE-2023-41588 entry documents a cross-site scripting (XSS) vulnerability in the Time to SLA plugin for Jira, affecting version 10.13.5. The vulnerability arises from a crafted payload injected into the durationFormat parameter, enabling execution of arbitrary web scripts/HTML. Practical impa...